AMENDMENTS TO THE CLAIMS 



No claims are canceled. 
No claims are added. 
5 Claims 1,12,13,17, 23, and 27 are amended. 
Claims 1-29 are pending. 

1 . (Currently amended) A method comprising: 

establishing an authenticated session with- between a server and a client; 
1 0 receiving at the server, a request from the client; 

determining whether the session is still authenticated; 

in an event that the session is no longer authenticated, persisting as a 
pending request at the server, t he request from the client as a pond i ng roquost ; 
and 

15 in an event that the session is subsequently re-authenticated, the server 

processing the pending request. 

2. (Original) The method of claim 1 wherein the determining comprises 
verifying an authentication token associated with the client. 

20 

3. (Original) The method of claim 2 wherein the verifying comprises 
verifying that the authentication token has not timed out. 
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4. (Original) The method of claim 2 wherein the authentication token is a 
cookie stored by the client. 

5. (Original) The method of claim 2 wherein the authentication token is part 
5 of the request received from the client. 

6. (Original) The method of claim 2 wherein the authentication token is 
encrypted. 

10 7. (Original) The method of claim 1 wherein persisting the request 
comprises storing the request in a file. 

8. (Original) The method of claim 1 wherein persisting the request 
comprises storing the request in a database. 

15 

9. (Original) The method of claim 1 further comprising, after persisting the 
request, directing the client to authenticate the session. 

10. (Original) The method of claim 9 wherein directing the client to 
20 authenticate the session comprises: 

directing the client to a login module; and 

directing the client to an address associated with the pending request. 
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11. (Original) The method of claim 10 wherein the address associated with 
the pending request is a URL. 

12. (Currently amended) A method comprising: 

5 establishing an authenticated session with- between a serve r and a client ; 

the client submitting a request to the server; 

the client receiving an indication that the session is no longer 
authenticated; 

the client obtaining a session re-authentication; and 
10 the client receiving an indication that the request has been processed.! 

without resubmitting the request . 

13. (Currently amended) A server system comprising: 

an authentication verifier configured to determine whether an initially 
15 authorized session associat e d with between the server and a client is still 
authorized; 

a client interface configured to receive a request from the client; 

a pending request store configured to maintain the request in an event 
that the session is not authorized; and 
20 a processing unit configured to process the request that is maintained in 

an event that the session is re-authorized. 
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14. (Previously presented) The system of claim 13 further comprising an 
authentication redirect generator configured to generate an instruction to 
redirect the client to obtain re-authorization for the session. 

5 15. (Original) The system of claim 14 wherein the instruction is a URL. 

16. (Original) The system of claim 14 wherein the authorization is an 
authentication token. 

10 17. (Currently amended) An application server comprising the server system 
as recited in claim 13. 

18. (Original) A system comprising: 

a client interface configured to receive a request from a client; 
15 an authentication token verifier configured to determine whether an 

authentication token associated with the client is valid; 

a pending request store configured to store the request in an event that 
the authentication token associated with the client is not valid; and 

an authentication redirect generator configured to generate an instruction 
20 to redirect the client to obtain a valid authentication token. 
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19. (Original) The system of claim 18 wherein the authentication token 
verifier is further configured to determine whether the authentication token has 
expired. 

5 20. (Original) The system of claim 18 wherein the authentication redirect 
generator is further configured to direct the client to access the request that is 
stored. 

21. (Original) The system of claim 18 wherein the pending request store is a 
10 database. 

22. (Original) A system comprising: 

means for receiving a request from a client; 

means for determining whether an authentication token associated with 
15 the client is valid; 

means for storing the request in an event that the authentication token is 
not valid; and 

means for generating an instruction to redirect the client to obtain a valid 
authentication token. 

20 
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23. (Currently amended) A system comprising: 
a client; 

an application server configured to: 

establish a~ an authenticated s ession with an a uth e nticat e d the 

5 client; 

receive a request from the client; 

maintain the request as a pending request in an event that the 
Gtient -session is no longer authenticated; and 

direct the client to r e- obtain auth e nt i cat i on re-authenticate the 
10 session ; 

the client being configured to re-authenticate the session by 
obtaininq ebtetfi authentication from an authentication entity in response to 
direction from the application server, and the client further configured to 
subsequently access the pending request; and 
15 upon client access to the pending request, the application server being 

further configured to process the pending request. 

24. (Original) The system of claim 23 wherein the application server and the 
authentication entity are implemented as one server. 
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25. (Previously presented) One or more computer-readable media 
comprising computer executable instructions that, when executed, direct a 
computing system to: 

establish a session with an authenticated client; 
5 receive a request from the client; 

determine whether the client is still authenticated; 

in an event that the client is no longer authenticated, persist the request; 

and 

in an event that the client is subsequently re-authenticated, process the 
1 0 request that is persisted. 

26. (Previously presented) The one or more computer-readable media of 
claim 25 further comprising computer executable instructions that, when 
executed, direct a computing system to: 

1 5 in the event that the client is no longer authenticated, 

redirect the client to re-obtain authentication; and 
direct the client to the request that is persisted. 
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27. (Currently amended) One or more computer-readable media comprising 
computer executable instructions that, when executed, direct a computing 
system to: 

establish a -an authenticated session with an authonticated a client; 
5 receive a request from the client; 

determine whether an authentication token associated with the client is 
still valid; 

store the request if the authentication token is no longer valid; and 
generate an instruction to redirect the client. 

10 

28. (Original) The one or more computer-readable media of claim 27 
wherein the instruction comprises an instruction to redirect the client to obtain a 
valid authentication token. 



15 29. (Original) The one or more computer-readable media of claim 28 
wherein the instruction further comprises an instruction to redirect the client to 
the request that is stored upon the client obtaining the valid authentication 
token. 
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